VPN: Download the Linux VPN Profile

Note: If you are using a University of Michigan MiWorkspace managed device, VPN software and profiles are configured for you. Please see MiWorkspace Work Remotely for more information. If you need help connecting to the VPN on a managed device, please contact the ITS Service Center. These pages provide VPN configurations for unmanaged devices (e.g., research users, BYOD users).
Note: Sponsored affiliates are able to use the VPN if they are issued a University of Michigan ID (UMID) number with their sponsorship credentials.

The instructions below are for Ubuntu Linux distribution. Instructions should be similar for other distributions.

Additional information can be found in the Cisco Release Notes for AnyConnect Client.

Note: In order for AnyConnect to trust the VPN server certificates and work properly, you must have Firefox installed on your system and run at least once. 

Download and Extract the Cisco AnyConnect VPN Client

  1. Download the appropriate VPN client for your university role:
  2. When prompted, authenticate using your uniqname and UMICH password.
  3. Extract the VPN files:
    1. In a terminal, enter  $ cd~/Downloads.
    2. For faculty, staff, students, and sponsored affiliates:

Enter $ tar zxvf UMVPN-linux.tar.gz to extract the files.

  1. For alumni and retirees:

Enter $ tar zxvf UMVPN-Alumni-Retiree-linux.tar.gz to extract the files.

  1. Change into the AnyConnect VPN Directory and run the installer.
    • Enter $ cd anyconnect-linux/vpn.
  2. Next, enter $ sudo ./vpn_install.sh
  3. You are notified that you have accepted the license agreement while the Cisco AnyConnect Secure Mobility Client is installed.

Start the VPN Client

Important You must have a network connection to connect via the VPN.

  1. Launch the Cisco AnyConnect Secure Mobility client.
  2. Select UMVPN - All Traffic or UMVPN - Only U-M Traffic from the profile drop-down list. 
  3. Click Connect.
  4. When prompted, authenticate using your uniqname and UMICH password.
  5. Complete Duo Two-Factor authentication.

For Faculty, Staff, and Students: Start the VPN Client in CLI With Duo Append

UMVPN - Only U-M Traffic:

  1. Enter $/opt/cisco/anyconnect/bin/vpn connect umvpn.umnet.umich.edu/umvpn-split-tunnel-alt in the terminal.
  2. Authenticate using your uniqname and UMICH password when prompted.
  3. You will be sent an automatic push, and you will need to use Duo two-factor authentication to accept. (There is no notification on the machine from where the Duo push was sent.)If you want to connect using a different Duo method, refer to Duo and Append Mode.

Note: Enter $/opt/cisco/anyconnect/bin/vpn disconnect in the terminal to disconnect.

UMVPN - All Traffic:

  1. Enter $/opt/cisco/anyconnect/bin/vpn connect umvpn.umnet.umich.edu/umvpn-all-traffic-alt in the terminal.
  2. Authenticate using your uniqname and UMICH password when prompted.
  3. You will be sent an automatic push, and you will need to use Duo two-factor authentication to accept. (There is no notification on the machine from where the Duo push was sent.) If you want to connect using a different Duo method, refer to Duo and Append Mode.

Note: Enter $/opt/cisco/anyconnect/bin/vpn disconnect in the terminal to disconnect.

Troubleshooting

  1. If the following failure message appears: Failed to start vpnagentd.service: Unit vpnagentd.service failed to load: No such file or directory you may need to add a package:
    • lib32z1
    • The latest package of lib32ncurses
  2. If you are still having problems you may need an additional package:
    • network-manager-openconnect
  3. Finally, you may need to restart the machine before re-running the VPN installer.

Tags: 
Last Updated: 
Tuesday, September 14, 2021